Certifiable Q&A for January 18, 2002

Welcome to Certifiable, your exam prep headquarters. Here you'll find questions about some of the tricky areas that are fair game for the certification exams. Following the questions, you'll find the correct answers and explanatory text. We change the questions weekly.

Question 1
Jim wants to track the use of his Windows 2000 Professional machine because he suspects that someone is logging on at night and accessing some of his confidential files. Using local Group Policy on his computer, he enables auditing for the object Access. However, when he tries to specify which files and folders to audit, he can't find an option to configure auditing. Which of the following is the most likely reason why Jim can't properly set up auditing on his computer?

Auditing of process tracking isn't enabled; to track system activity such as file access, Jim must enable process tracking.

Auditing is enabled at the local level; Jim must enable auditing at the domain level.

The drive that Jim wants to audit isn't NTFS formatted; Jim must format the drive with NTFS before he can implement auditing.

Jim must restart his system before he can enable auditing.

Question 2
You installed Windows 2000 Professional, Windows NT 4.0 Service Pack 4 (SP4), and Windows 95 on a computer for testing purposes. You created partitions and placed Win95 on the C drive, NT Workstation 4.0 on the D drive, and Win2K Pro on the E drive. You also created an F drive on which you want to store data that you can access from all OSs. You want to implement individual file security for data on the D drive and enforce disk quotas for data on the E drive. Which of the following scenarios represents the best file systems to use for each of the partitions? (Choose the best answer.)

FAT32 on C, NTFS on D, FAT on E, FAT32 on F

NTFS on C, FAT32 on D, FAT on E, NTFS on F

FAT on C, FAT32 on D, NTFS on E, FAT on F

FAT on C, NTFS on D, NTFS on E, FAT on F

NTFS on C, NTFS on D, NTFS on E, FAT on D

FAT32 on C, NTFS on D, FAT32 on E, NTFS on F

Question 3
Performance on your Windows 2000 system has become sluggish. As part of the troubleshooting process, you want to use System Monitor to view the performance of some resource usage and system activity tracking counters. When you try to collect logical-disk data for your system, you can't. What's the most likely reason for that you can't collect and view logical-disk data on a Win2K Professional computer?

Answer to Question 1
The correct answer is C—The drive that Jim wants to audit isn't NTFS formatted; Jim must format the drive with NTFS before he can implement auditing. To set up permissions and auditing for files and folders, you must use NTFS drives. You can't implement auditing on FAT or FAT32 drives.

Answer to Question 2
The correct answer is D—FAT on C, NTFS on D, NTFS on E, FAT on F. The following OSs support the following file systems:

To boot multiple OSs successfully, your machine must have a common partition that all the OSs can access—and in most cases, this partition is the C drive. To provide support for file and folder security in Win2K Pro and NT Workstation 4.0, you must format their drives with NTFS. Also, Win2K Pro requires NTFS to provide support for disk quotas.

Answer to Question 3
The correct answer is D—By default, the OS doesn't collect logical-disk counter data. To enable collection of logical-disk counter data, you must run a command on your system.

To obtain performance counter data for logical drives or storage volumes, you must type the following command at a command prompt:

diskperf -yv

This command causes the disk performance statistics driver used for collecting disk performance data to report data for logical drives or storage volumes. By default, the OS uses the diskperf -yd command to obtain physical-drive data.